BUGS
----

 * fragmented packets are not handled correctly, affects nstats output above layer 4
 * the iptables monitor actually never worked correctly
